Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File:                     sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier:          8x41nwXTwhGlxxMdBNyRehkzhv3EsqfrDzh2EFCWvPY=
Subject key identifier:   DB:D1:98:7E:EB:C5:98:A2:4E:B7:C6:D0:DD:4B:0E:71:1C:BD:47:00
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer:       /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial:       0196B9DAA0A2D2A78F34856347BD954CA2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number:          0E9E
Signing time:             Sat 10 May 2025 11:00:35 +0000
Manifest this update:     Sat 10 May 2025 11:00:35 +0000
Manifest next update:     Sun 11 May 2025 11:00:35 +0000
Files and hashes:         1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=)
                          2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: qC8WTNBXFVxiJ1uZsZAKDqP2i3b1PkLY56o42pnbaV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:a0:a2:d2:a7:8f:34:85:63:47:bd:95:4c:a2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
        Validity
            Not Before: May 10 11:00:35 2025 GMT
            Not After : May 11 11:00:35 2025 GMT
        Subject: CN=dbd1987eebc598a24eb7c6d0dd4b0e711cbd4700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:ae:89:b7:aa:76:00:bd:40:60:c0:13:4c:
                    24:09:77:93:c9:9c:7a:e9:cf:b8:28:a9:31:18:c0:
                    41:e9:35:6c:8b:96:b0:96:7e:b7:d4:db:3d:e1:67:
                    2a:79:da:91:e1:78:40:81:d8:12:e4:ce:21:ec:05:
                    bc:32:4b:cd:c4:15:0a:3c:e2:4d:25:8a:e4:24:d6:
                    12:b5:65:11:cd:eb:54:fc:f5:43:d7:56:2a:4e:92:
                    8b:24:7c:bd:7d:a2:b8:18:7a:79:47:bf:c8:fe:f6:
                    ff:f8:dd:79:ea:b4:b6:30:57:75:72:00:fd:78:fd:
                    8c:f5:15:c1:ab:a1:23:85:b4:0c:20:bb:41:1f:14:
                    ee:23:35:9d:6b:d9:fc:f7:2f:82:81:4b:2d:96:9e:
                    21:b4:a7:8c:4f:81:a1:53:7b:19:23:15:3b:13:e3:
                    f2:f9:fa:f1:05:ba:f1:cf:28:16:01:f8:9c:c7:03:
                    78:9c:35:cc:df:f2:3e:b5:b4:4c:31:26:de:b3:24:
                    78:3c:4f:0c:60:1a:38:3f:27:cc:a6:77:52:c1:70:
                    c0:71:f1:94:d9:8e:61:80:87:b5:c8:43:a4:04:ac:
                    05:1b:d2:25:ce:43:93:e6:81:ff:46:2c:d1:7e:16:
                    9b:24:1e:a9:2e:7e:0d:14:6f:e6:2a:59:ef:b2:0e:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:98:7E:EB:C5:98:A2:4E:B7:C6:D0:DD:4B:0E:71:1C:BD:47:00
            X509v3 Authority Key Identifier:
                keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:55:6f:6e:bf:92:56:9e:8a:bb:63:ab:fc:c8:82:a5:74:89:
         5c:39:0a:c8:0b:cf:f2:6c:49:1d:33:6a:9a:6d:4e:85:7c:ee:
         c9:ef:5d:b8:23:e4:43:b3:f7:e4:86:83:21:fc:0c:31:4a:97:
         ca:84:bb:d7:ef:5f:22:5a:bd:b6:11:25:9b:01:0a:6b:9d:3a:
         fa:e7:2f:b2:22:8e:81:d8:c2:26:13:64:8d:da:e9:b8:1e:7a:
         fe:a4:56:e4:5b:d2:9b:ce:65:65:ee:a3:a1:12:48:5f:f5:5a:
         af:04:79:45:8b:5f:ce:21:f1:eb:88:b2:c2:17:44:56:fa:8b:
         0f:91:c6:4f:fd:d2:37:bb:62:c8:eb:7d:df:79:3b:0c:46:71:
         23:8b:f5:b5:e5:b5:f0:1c:f9:f5:65:8d:b5:53:79:4f:ac:f3:
         89:3d:cc:f7:c1:82:c7:86:35:a3:fa:5b:bf:d9:ef:55:1b:bd:
         e0:3c:fe:4d:d5:46:39:2a:42:a0:83:17:62:dd:91:fd:56:f8:
         9d:da:d7:5f:ea:18:c0:4c:1f:e2:29:f8:24:01:34:1a:c6:5d:
         8f:af:bf:a7:a9:32:4c:dc:f9:d1:9e:a2:46:8b:6e:b5:b2:8c:
         3a:b1:0e:54:01:72:ff:c1:a7:6e:af:94:b8:8b:e8:44:9f:24:
         aa:31:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:21 2025 by rpki-client